File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Directory traversal vulnerability in include/doc/get_image.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the img parame…CVE-2008-1119Centreon · 8.1% likely

   CWE-22

2. Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter…CVE-2008-1178Centreon · 5.2% likely

   CWE-22

3. licenseUpload.php in Centreon Web before 2.8.27 allows attackers to upload arbitrary files via a POST request.CVE-2018-21024Centreon · 1.9% likely

   CWE-434

4. Local File Inclusion in minPlayCommand.php in Centreon (19.04.4 and below) allows an attacker to traverse paths via a plugin test.CVE-2019-19486Centreon · 1.5% likely

   CWE-22

5. Path traversal in Centreon Open TicketsCVE-2026-2749Centreon · CVSS 9.9 · 0.6% likely

   CWE-22

6. A user with elevated privileges can inject XSS by altering the content of a SVG media during the submit request.CVE-2025-4648Centreon · CVSS 8.4 · 0.3% likely

   CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.